Changes between Version 11 and Version 12 of ESGFNodeInstallation


Ignore:
Timestamp:
Nov 9, 2013 4:00:37 PM (8 years ago)
Author:
antonio
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • ESGFNodeInstallation

    v11 v12  
    7373}}}
    7474
    75 = Instaall the ESGF data/compute node =
     75= Install the ESGF data/compute node =
    7676
    7777As reference guide the instructions used has been provided by IPSL[[FootNote(http://forge.ipsl.jussieu.fr/prodiguer/wiki/ESGF-FR%3Adevins)]].
     
    8484$ esg-bootstrap --devel
    8585}}}
     86{{{
     87.............
     88}}}
     89
     90= Index peer configuration =
     91== Configure host certificate and CA public key ==
     92I think the procedure I sent in the below mail is correct but a little to technical. it might be better to use esg-node commands in order to federate:
     93
     94Here is where you should put the signed csr we sent via scp to your server yesterday
     95{{{
     96/etc/grid-security/data.meteo.unican.es-esg-node-globus.csr.signed
     97}}}
     98
     99Then if the tomcat key is not in /etc/grid-security, copy it inside:
     100{{{
     101$ cd /etc/grid-security; cp /esg/conf/tomcat/hostkey.pem ./
     102}}}
     103
     104Then run this command to install the key pair in tomcat:
     105{{{
     106$ cd /etc/grid-security; esg-node --install-keypair data.meteo.unican.es-esg-node-globus.csr.signed hostkey.pem
     107}}}
     108
     109You will be prompted to enter the cacert file; enter the url to the index node cacert.pem:
     110{{{
     111Please enter your Certificate Athority's certificate chain file(s):
     112 [enter each cert file/url press return, press return with blank entry when done]
     113certfile> http://vesgint-idx.ipsl.jussieu.fr/cacert.pem
     114}}}
     115
     116[[NoteBox(warn, This process should fetch the CA cert to `/etc/grid-security/certificates`, but doesn't. Yo need to manually copy the CA cert.]]
     117
     118Then set auto fetch certs false otherwise `/etc/grid-security/certificates/*` will be overwritten by `esgf-prod` peer groups certificates
     119{{{
     120$ esg-node --set-auto-fetch-certs false
     121}}}
     122
     123Then restart your node
     124{{{
     125$ esg-node restart
     126}}}
     127
     128Then register
     129{{{
     130$ esg-node --register vesgint-idx.ipsl.jussieu.fr
     131}}}
     132Then rebuild the Tomcat's trustore
     133{{{
     134$ esg-node --rebuild-truststore
     135}}}
    86136
    87137= Data Publishing =